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(54) A method of monitoring a cellular mobile radio system to derive location area information 



(57) A method is provided for deriving information 
atK)ut location areas in a cellular rnobile radio system 
that comprises a fixed part providing radio coverage in a 
plurality of cells logically grouped into location areas, and 
mobile stations for communicating with the f ixed part of 
the system. In such systems, each mobile station passes 
location update n^ssages to the fixed part of the system, 
at least upon changing location areas, to enable thefixed 
part to keep track of the mobile stations. The present 



method involves monitoring these location update mes- 
sages to extract location-area related data, and then 
combining (30. 31. 32) the data extracted from many 
such messages to produce location-area related infor- 
mation such as lists of cells (35) making up each location 
area, the identity of gateway cells in each location area, 
lists (36) of adjacent location areas, and the identity of 
the most used location areas. 
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Description 
Technical Field 

The present invention relates to the derivation of 
information about location areas in cellular mobile radio 
systems such as systems operating according to the 
GSM or DCS1800 standards. For convenience, systems 
operating according to the GSM and DCS1800 stand- 
ards, including derivatives thereof, will hereinafter be 
referred to as "QSM-type" systems, DCS1800 systems 
themselves being derivative of GSM systems and exhib- 
iting the same characteristics for present purposes: it 
should, however, be noted that the present invention is 
not restricted to GSM-type systems. 



It is an object of the present invention to provide a 
method by which up-to<late location-area related infor- 
mation can be derived. 

5 Summary of the Invention 

According to one aspect of the present Invention, 
there is provided a monitoring method for a cellular 
mobile radio system that comprises a fixed part providing 
JO radio coverage in a plurality of cells logically grouped into 
location areas, and mobile stations for communicating 
. with the fixed part of the system, each mobile station 
being operative to pass location update messages to the 
fixed part at least upon changing location areas; the 
IS method involving: 



Background Art 

A modem cellular mobile radio system, such as a 
GSM-type system, comprises a fixed part providing radio 20 
coverage in a plurality of cells logically grouped into loca- 
tion areas, and nnobile stations for communicating with 
the fixed part of the system. In order to enable the fixed 
part of the system to locate a mobile station for the pur- 
pose of passing a new call to that mobile, the fixed sys- 25 
tem part keeps track of the cun-ent location area of each 
mobile station making use of the system. Of course, as 
a mobile station roams about within the coverage area 
of system, it will change location area. The mobile station 
is able to recognise when this occurs because it listens 30 
to the cell-specific broadcast messages made by the 
system; these messages include the identity of the cur- 
rent location area in which the mobile station finds itself 
and the mobile station conpares this cun^ent location- 
area identity with a stored record of the k)cation area 35 
where it believed itself to be. In the event of the mobile 
station detecting a discrepancy between the braodacast 
location-area identity and its stored record, it will transmit 
a location update request message to the fixed part of 
the system, enabling the latter to update its record of the 40 
location of the mobile station. 

Information regarding the topology of cells and loca- 
tion areas, such as which cells belong to which location 
areas and which location areas are adjacent, can be 
assembled from the structural configuration of the sys- 45 
tem. However, this requires operator action with the 
result that there is no guarentee that the assembled infor- 
mation is up-todate; in particular, changes made to the 
system may r\oX be incorporated into the assembled 
information, or more likely, ttiere will be a significant delay so 
in providing and introducing this infornnation. 

Furtiiermore, certain location-area related informa- 
tion cannot be derived from static configuration data, 
such information including information about the popu- 
lation (in terms of the number of mobile stations) of dif- 55 
ferent location areas and which cells form "gateway cells* 
through which mobile stations enter or leave particular 
location areas. 



- monitaing tiie location update messages to 
extract location-area related data from each of at 
least some of the messages, 

~ combining the location-area related data extracted 
from a plurality of tiie location update messages to 
produce location-area related information, and 

- outputting the location-area related information. 

The location-area related information may comprise 
the identification of the cells making up a location area. 
In this case, the location-area related data extracted from 
a location update message will comprise the current cell 
and location area of the mobWe station that sent the mes- 
sage. 

Alternatively or add'rtionally, the location-area 
related information may connprise the identification of 
which location areas are adjacent each other. In this 
case, the location-area related data extracted from a 
location update message will comprise the old and new 
location areas of the mobile station that has sent the 
message upon changing location areas. 

Again, the location-area related information may 
alternatively or additionally comprise the identification of 
which location areas are responsible for the most loca- 
tion update messages. In this case, the location-area 
related data extracted from a location update message 
comprises the current location area of the mobile station 
that sent the message, and the method furtiier involves 
maintaining a count of such messages for each bcation 
area on which data is exti'acted. 

Yet another possibility is that the location-area 
related information alternatively or additionally com- 
prises the identification of the particular cells in a specific 
location area ttiat constitute the primary gateway cells 
for ertry to the location area. In this case, the location- 
area related data exti'acted from a location update mes- 
sage will comprise the current cell and location area of 
the mobile station that sent the message, and the 
method further involves maintaining a count of such 
messages for each cell of the specific location area con- 
cerned. 

Preferably, the location update messages are mon- 
itored across tiie system to extract for each monitored 
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message the current ceil and location area of the nnobile 
station that sent the message, a check then being made 
that no cell is associated with more than one location 
area. 

Where the mobile radio system Is a GSM-type sys- s 
tem, the location update messages are advantageously 
monitored on at least one 'A' interface between a Base 
Station Subsystem BSS and a Mobile Switching Center 
MSG- Preferably, the location update messages are 
monitored across the system on the *A' interfaces asso- 10 

UiaiUU witn uii II I u iia VKtsc, u i6 1 1 icu luu 1 1 lay lui u ici 

involve: 

determining from the location update messages 
monitored on the 'A' interfaces, the current location is 
area of the mobile station that sent the message; 

- associating the location area determined for each 
monitored message with the MSG associated with 
the 'A' interface on which the message was moni- 
tored: ^° 

- checking that no location area is associated with 
rmre than one MSG. 

Brief Description of Drawings 

25 

A monitoring method, according to the invention, for 
deriving location-area-reiated information in a cellular 
mobile radio networK will now be described, by way of 
non-limiting example, with reference to the accompany- 
ing drawings, tn which: 30 

Figure 1 is a block diagram showing the main com- 
ponents of a GSM cellular mobile radio 
system: 

Figure 2 is a diagram illustrating the relationship ss 
between radio cells and location areas in 
the Figure 1 system; 

Figure 3 is a diagram illustrating the layered format 
of messages used to canry location update 
requests in the Figure 1 system; 4o 

Rgure 4 illustrates the composition of a "Layer 3 
Information** information element carried 
by the Figure 3 message; 

Figure 5 illustrates the composition of a 'Gell Iden- 
tifier" information element carried by the 45 
Figure 3 message: and 

Figure 6 is a diagram illustrating the processing of 
information extracted from location update 
request messages for the purpose of deriv- 
ing location-area-related information. so 

Bast Mode for Can-vina O ut the Invention 

Rgure 1 is a diagram showing the main elements of 
a public land mobile network (PLMN) based on digital ss 
cellular radio technology: in particular, the Figure 1 net- 
work is a GSM network. 

The Figure 1 network comprises a network and 
switching subsystem (NSS) 10 which connects with a 



plurality of base station subsystems (BSS) 11 ; the BSS 
provide radio communication with nrabile stations 12 
(only one of which is shown in Figure 1). The NSS 10 
also communicates with the fixed public network 13 (the 
public switched telephone network PSTN and integrated 
digital services network ISDN). Indeed the PLMN can be 
thought of as an access path to the PSTN/ISDN, though 
calls nrtay also be wholly contained within the PLMN. 

Each BSS 11 comprises a fc>ase station controller 
(BSC) 17, and a plurality of base transceiver stations 
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has radio transmitters and receivers for providing radio 
coverage of a local area known as a 'cell'. 

Signalling and user data (digitised voice and other 
digital data such as computer data) pass between each 
mobile station 1 2 and the BTS 1 8 of the cell in which the 
mobile station is located. Asa mobile station moves from 
one cell to another, control of handover of communica- 
tion with the mobile station from the BTS of the old cell 
to the BTS of tiie new cell, is effected by the BSC. 

The radio interface between a mobile station and 
BTS is standardised within a particular system such as 
GSM. Similarly, the interface between each BTS 18 and 
its associated BSC 1 7. by which user data and signalling 
are exchanged between these elements, is also gener- 
ally standardised (in GSM, this interface is known as the 
*Abis' interface). 

Each BSS 1 1 communicates witii a mobile switching 
centre (MSG) 20 of the NSS 10, each MSG 20 generally 
being in communication with several BSS. The interface 
between a BSS and an MSG is again generally stand- 
ardised, this interface being known as the 'A' interface in 

gsm: 

In gsm networks, user data and signalling are mul- 
tiplexed across the radio interface, the *Abis* interface 
and the 'A' Interface. However, within the NSS, user data 
and signalling are handled separately. This is shown in 
Figure 1 by depicting user-data paths in solid lines and 
signalling paths in dotted lines; when both use the same 
path, a solid line with superimposed white dots is used. 

tn the NSS. the user data is handled by the MSGs 
and for a given call, the user data wilt commonly traverse 
two MSGs 20. Attiiough in Figure 1 tiie MSGs 20 are 
shown as directly connected by a solid line, this should 
be understood merely as showing that user-data fraffic 
can pass between the MSGs; in practice, whilst a direct 
connection is used where justified by traffic levels, MSGs 
may be connected through the intermediary of the fixed 
piidlic network 13. 

tn addition to tiie MSGs 20. user data may also be 
handled in the NSS by what in GSM parlance is known 
as a gateway MSG (GMSC) 21. The purpose of the 
GMSG 21 is to handle calls directed to mobile stations 
from outside of tiie PLMN. the GMSC determining where 
the call should be routed to catch up with the mobile sta- 
tion. In practice. GMSG functionality is often provided at 
each MSG. 

The remaining conponents of the NSS 10 are con- 
cerned with control functions and these connponents 



3 



BNSDOCID: <EP__ 0710043A1 I > 



5 



EP 0 710 043 A1 



6 



communicate with each other, with the MSCs and 
GMSC. and with the fixed public network through signal- 
ling links using a signalling system generally based on 
the SS7 ( CCITT Signalling System No.7) standard. 
Within the NSS 1 0 a GSM system uses the MAP (Mobile 5 
Application Part) protocols tor non-circuit-related signal- 
ling traffic and the TUP (Telephone User Part) and ISUP 
(ISDN User Part) for circuit-related signalling traffic- 
Again, the signalling paths between components of the 
NSS 1 0 are not necessarily direct but will gaierally make 10 
use of the SS7 network associated with the fixed public 
network. 

The components of the NSS not already described 

are: 

IS 

the Home Location Register (HLR) 23 - this contains 
information about subscribers registered with the 
PLMN (such as the sen^ices available to a particular 
subscriber and the PU^N network address of the 
MSG where the subscnlser Is cun^ently located); so 
the Visitor Location Register (VLR) 24 - generally, 
each MSG has its own associated VLR which holds 
both subscriber data about users currently visiting 
the area covered by the MSG, and data about the 
current location of each user within the MSGs cov- 2s 
erage area; 

the Authentication Register (AuG) 25 - this compo- 
nent is closely associated with the HLR and holds 
data providing for sut>scriber Identification and 
encryption of calls; 3o 

- the Equipment Identify Register (EIR) 26 - this stores 
information about the mobile stations 12 them- 
selves; 

- the SMS Gateway 27 - in GSM. a special "Short 
Message Service" is available, this being provided 3S 
through the SMS Gateway. 

Three main control functions may be identified in 
regulating calls in the PLMN (the signalling traffic being 
the communication required to implement these tunc- 4o 
tions). These three functions are: 

radio resource managennent • this is the task of 
establishing, maintaining and releasing stsible con- 
nections between mobile stations and an MSG 45 
despite movements of a mobile station. This man- 
agement function prinrarly involves the BSGs but 
also the BTSs and MSGs. 
mobility management - this is the task of maintain- 
ing up-to-date user location information so as to per- 50 
mit incoming calls to be routed to the appropriate 
mobile station; in GSM. the address of the MSG in 
the area of which a user is to be found, is stored in 
the user^s HLR whilst the user's location within that 
area is held in the VLR associated with the MSG. ss 
This management function involves the MSCsA/LRs 
and the HLR. 

call management - this task involves, as well as the 
usual control of calls as found in the fixed putslic net- 



work, the routing of calls towards a mobile station 
when the location of the latter is initially not known. 
In GSM, for calls towards a mobile station from out- 
side of the PLMN in which the user of the mobile 
station is registered, it is the task of the GMSG to 
find out from the home HLR of the user being called, 
where that user is and then appropriately route the 
incoming call. The call management function 
Involves the MSGA^LR. HLR and GMSG. 

Turning now to Figure 2. this Rgure shows a pattem 
of hexagonal cells each representing a corresponding 
radio cell, that is, the coverage area of a BTS (assuming 
that each BTS only covers one area). In Figure 2 only 
eight cells have been specifically labelled, these being 
cells G1 to G8. 

Groups of physically adjacent radio cells are logi- 
cally associated, the resultant coverage areas being 
referred to as location areas". Thus, cells C 1 to G 8 are 
grouped together and cover a location area L1 . In Rgure 
2, six location areas L1 to L6 are shown. 

In GSM systems, the cells associated with each 
MSG (that is, the cells associated with the BTSs of the 
BSSs connected to the MSG concerned) are divided into 
one or more location areas with the only limitation being 
that no location area can contain cells associated with 
more than one MSG. Thus, in Figure 2 the cells associ- 
ated with the upper MSG 20 form three location areas 
LI to L3. whilst the cells associated with the lower MSG 
20 form a further three location areas L4 to L6. 

It is worth nothing that the GSM standards do not 
themselves require that alt the cells associated with a 
particular BSS 11 are in the same location area but this 
will often be the case. 

The purpose of grouping cells into location areas is 
to facilitate the task of mobility management. In order for 
a mobile station to be located to receive an incoming call, 
two basic approaches are possible. Firstly, a paging 
message could be transmitted in every cell of the PLMN 
in order to have a searched-for mobile station respond 
to identify its position; such an approach is, however, 
very inefficient. The second approach is to have the 
PLMN store location information on each user whicfi is 
periodically updated as the user (or rather, his mobile 
station) moves around the network. This latter approach 
is the one most usually taken. However, if a location 
update is effected every time a mobile station moves 
from one cell to another, a very large amount of signalling 
traffic would be created. In order to avoid this problem. 
GSM uses the concept of a location area with a nrrabile 
station only initiating a location update when it deter- 
mines it has changed location area. Since the PLMN now 
knows the location area of each mobile' station, when it 
is necessary to route an incoming call to a particular 
mobile, it is only necessary to transmit a paging message 
in the cells of the relevant location area. 

As previously indicated, location information is actu- 
ally stored in two parts with the address of the MSG in 
whose area a mobile station is cun'ently located being 
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stored in the HLR, and the local location information (that 
is, current location area) being stored in the VLR asso- 
ciated with that MSG. 

A mobile station can tell when it has changed loca- 
tion area because the BTS of each cell periodically trans- 
mits the identity of the cell and location area in which it 
is located: by storing this location area information, the 
mobile station can. readily tell when it changes location 
area. 

Upon detecting a location area change, the mobile 
station trapismits a "iocation update reciuest" whiui iS 
received tylhe BJS-of.thex;ell.ia. which the mobile station 
is currently to be found. This request Is then passed via 
the BSC associated with the BTS. back to the relevant 
MSC The MSG then updates the location information 
held for the mobile station in the VLR associated with the 
MSG. In the event that a mobile station moves from a 
location area covered by one MSG to a location area cov- 
ered by another MSG, a changeover process is effected 
between MSGs which also involves the HLR being 
updated with the address of the MSG into whose area 
the mobile station has now nnoved. 

A nnobite station is also arranged to send out a loca- 
tion update request message, if it receives an indication 
from the network that it is not known to the VLR in whose 
coverage area it is cun-ently located. 

Finally, in order to ensure that up-to-date location 
information is maintained on mobile stations, and also to 
enable the databases in the HLR and VLR to be rebuilt 
in case of data loss, each mobile station is arranged to 
send a location update request message (a "periodic" 
location update request) if it has not sent such a request 
within a predetermined, network configurable, amount of 
time. 

For whatever reason a location update request is 
generated, h results in the appearance of a correspond- 
ing message on the *A' interface between the BSC and 
MSG concerned. Figure 3 show the format of this mes- 
sage in a GSM system. 

For messages on the 'A* interface, the SS7 SCCP (Sig- 
nalling Connection Control Part) and underlying MTP 
(Message Transfer Part) provide the transport service. 
More particularly, information is transported in MTP level 
2 signalling units, the composition of which is: 
Rag Field (8 bits): 

Backward Sequence Number BSN (7 bits): 
Backward-Indicator bit BIB (1 bit); 
Forward Sequence Number BSN (7 bits); 
Forward-Indicator bit BIB (1 bH); 
Length Indicator LI (6 bits); 
Spare SP (2 bits); 

Service Information Octet SIO (8 bits); 

Signalling Ihfonmation Reld SIF (8n bits): 

Check Field (16 bits): 

Rag Reld (8 bits). 
MTP level 3 information is contained in the SIO and in a 
routing label forming part of the level 2 signalling infor- 
mation field. The routing label includes source and des- 
tination addresses for the signalling unit in terms of point 



codes. Above MTP level 3 is the SCCP layer for carrying 
information according to a required service type (con- 
nectionless or connection-oriented): the SCCP header 
information relates to provision of this service as well as 

5 including further addressing information that, inter alia, 
specifies what is termed a "subsystem number" for iden- 
tifying the user of the transport service provided by the 
SCCP. In the present case, the user is the Base Station 
Subsystem Application Part (BSSAP) peer-to-peer pro- 

70 tocol operating between the BSS and MSG concerned. 
BSS.AP messages are identified by a subsystem number 
of. "FE" in hex. 

BSSAP is sub-divided into two parts, each BSSAP 
message being associated with one or other part as indi- 

15 cated by a discriminator octet (DSCR in Figure 3). These 
two parts are: 

~ BSS Management Application sub-part (BSS- 
MAP) which is used for radio resource (RR) and 
20 BSC managennent: and 

- Direct Transfer Application sub-part (DTAP) which 
is used for the transfer of call control (CM) and mobil- 
ity management (MM) messages. 

25 Location update requests are related to nhobility 
management and it might therefore be expected to find 
such requests embedded in DTAP messages. In fact, 
location update requests are embedded in BSSMAP 
messages. The reason for this is that each location 

so update request requires the establishment of a new radio 
connection between the mobile station concerned and 
the relevant MSG. and the establishment of such a con- 
nection is a radio resource management issue. Indeed, 
whenever a new radio connection is established, the "ini- 

35 tial message" concerned with that connection is piggy- 
backed onto the RR message on the *A* interface 
involved in setting up the connection through to the rel- 
evant MSG. More particularly, the BSSMAP message 
"Complete Layer 3 Information" is used to carry initial 

40 messages. Now. since the "initial message" associated 
with the making of a location update request is that 
request itself, the location update requests are to be 
found embedded in BSSMAP "Complete Layer 3 Infor- 
mation" messages, these latter being indicated by a 

45 message type octet ^10101 1 V (the rightmost bit being 
the first bit of the octet). 

Each "Complet Layer 3 Information" message com- 
prises two information elements, namely: 

50 - Cell Identifier: 

" Layer 3 Information; 

the contents of which are shown in detail in Figures 5 
and 4 re^ectively in the case of a location update 
55 request being carried Ijy the "Complete Layer 3 Informa- 
tion" message. For each information element, the first 
octet identifies the type of the information element whilst 
the second octet gives its length. 
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It is the "Layer 3 Information** information element 
that actually contains the location update request, this 
being indicated in bits 1 to 6 of octet 4 (see Figure 4). 
The location update type is contained in bits 1 and 2 of 
octet 5 ('LU Type*) and is used to distinguish normal loca- 
tion update requests resulting from a change in location 
area by a mobile station (LU Type ='00*). from a periodic 
location update request caused by a timeout in the 
mobile station (LU Type = '01'). 

For present purposes, the location-area related data 
of interest is: 

- the curent cell of the mobile station making the 

location update request (octets 6 and 7 of the "Cell 

Identifier" information element); 

" the new location area of the mobile station (octets 

4 and 5 of the "Cell Identifier" information element); 

and 

" the old location area of the mobile station (octets 
9 and 1 0 of the "Layer 3 Information" information ele- 
ment). 

In accordance with the present invention, the mes- 
sages carrying location update requests are monitored 
to extract cell and location area (old and new) data. In 
the emlxxliment shown in Figure 1 . a respective SS7 
nrwnitor 40 is used to monitor each 'A' interface for the 
purpose of detecting location update requests and 
extracting cell and location area related data from each 
such request. The details of how such data can be iden- 
tified and extracted will be apparent to persons skilled in 
the art. particularly having regard to the explanation 
given above about where location update requests are 
to be found. However, in general terms, the following 
steps will be followed: 

(1) - "Complete Layer 3 Information" BSSMAP mes- 
sages are detected by examining the SCCP subsys- 
tem number to identify BSSAP messages, then the 
discriminator of each BSSAP message to identify 
BSSMAP messages, and finally the message type 
of each BSSMAP message to identify *'Complete 
Layer 3 Information" messages. 

(2) - the information element content of each "Com- 
plete Layer 3 Information" message is checked to 
ensure these elements are "Cell Identifier" and 
"Layer 3 Information". 

(3) - the "Layer 3 Information'' information element 
is checked to see if it relates to a location update 
request and if it does, the type of this request is 
noted. 

(4) • where a location update request is identified, 
the data concerning the current cell and current 
(new) location area of the mobile station making the 
location update request, is extracted from the "Cell 
Identifier" information element, and the data con- 
cerning the old location area of tiie mobile station is 
extracted from the "Layer 3 Information" information 
element 
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The location-area related data extracted from each 
location update request is processed locally by each 
probe 40 and the resultant processed information is peri- 
odically downloaded over a network 41 (such as the 
operations and management network associated with 
the main network) to a central workstation 42 where fur- 
ther processing is canried out Indeed, all processing of 
the extracted location area related information coutd be 
effected by the workstation 42. 

The main phases and data structures involved in 
processing the location-area related data are illustrated 
in Figure 6. 

The first processing phase is a 'per probe' phase car- 
ried out on the data extracted by each probe (either by 
the probe 40 itself or by tiie workstation 42). The main 
data structures involved in this processing phase are: 

- an MSG item 33 containing an identifier of the 
MSG associated with the *A' interface monitored by 
tiie probe (tiiis identifer may be programmed in by 
an operator or autonnatically derived by the monitor 
by reading the destination point code for the signal 
units carrying tiie location update requests). 

» a location area list 34 containing an entity for each 
current (new) location area (Lp ... L,) identified in the 
location-area related data extracted by the probe 40; 
tills list 34 is pointed toby the MSG item 33. the loca- 
tion areas identified in the list being tiiose associated 
with tiie MSC identified in the MSG item 33. 

- for each location area identified in the location 
area list 34. a respective: 

- cell list 35 identifying tiie cells (Cb ... C|) asso- 
ciated witii that location area (a cell is consid- 
ered associated witii a location area if the 
location area is the current location area con- 
tained in the "Cell Identifier" information ele- 
ment identifying the cell); for each cell in tiie cell 
list 35, a count is maintained of the number of 
location update requests made with that cell 
identified as ttie current cell (ttiis is the "hits" 
count in Figure 6). 

" adjacent location-area list 36 identifying the 
location areas (L^ ... found to be adjacent 
the location area concerned; a location area is 
considered to an adjacent one when it forms the 
"old" location area in a normal location update 
request for which the "new" location area is the 
one of interest. 

Each location area entry in tiie location area list 34 
contains pointers to its associated cell list 35 and 
adjacent location areas list 36. 

During the 'per probe* processing phase, as new 
data is extracted from each location update request mon- 
itored by a probe 40, the data is analysed to see if it iden- 
tifies a new location area not previously identified in the 
list 34 maintained for tiie probe - if it does, a new entry 
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is added to the list 34. The cell associated with the iden- 
tified location area is then examined and if this cell is not 
already present in the cell list 35 associated with the loca- 
tion area concerned, a corresponding new entry is made 
in list 35 with a "hits" count of one; if the cell is already 
known, its "hits" count in list 35 is incremented. Where 
an "old" location area is identified in the extracted loca- 
tion-area related data, this location area is added to the 
adjacent location area list 36 for the location area con- 
cerned unless a corresponding entry already exists. 

The second main processing phase is a 'per MSG' 
processing phase 31 carried out by workstation 42; in 
this phase the data collected from all the probes associ- 
ated with a particular MSG, are combined. The main data 
structures involved in the phase are the same as for the 
'per probe* processing phase, the 'per MSG' phase being 
primarily an aggregation of the data from multiple lists 
34, 35 and 36 for a particular MSG into single lists 34, 
35 and 36 for that MSG with the elimination of duplicate 
entries and the adding together of the cell "hits" counts 
for any cell which previously appeared in more than one 
list 35. The MSG item 33 is used to identify the groups 
of lists 34. 35 and 36 that need to be combined to con- 
solidate the information for each particular MSG. 

At this stage, since each location area in a GSM sys- 
tem should only contain cells associated with one MSG, 
all available information on the cell composition of each 
location area contained in a list 34 for a particular MSG, 
will have been collected and will be contained in the cor- 
responding cell list 35. However, there is no guarentee 
that all cells of a location area will have been involved in 
a location update request during the period of n^nitoring 
by the relevant probes. This is particularly the case in 
respect of any cells ('internal' cells) not located at a 
boundary of the location area concerned, for such inter- 
nal cells will not be involved in normal location update 
requests, there beirtg no change in location area when 
such a cell is entered from an adjacent cell. An internal 
cell may nevertheless feature in the cell list 35 of a loca- 
tion area if a periodic location update request has been 
issued by a mobile station from that cell. With the above 
caveat, the cell list 35 for each location area associated 
with a particular MSG may be output as the cell compo- 
sition of that location area. 

The information contained in the cell lists 35 after 
the 'per MSG' processing phase will also provide an indi- 
cation, from the "hits" count associated with each cell 
entry, of which cells are the ones mostly involved in loca- 
tion update requests • that is, are the ones through which 
the location areas concerned are mostly entered. The 
identity of, for example, the top three such cells ('gate- 
way' cells) for each location area may be identified and 
output. 

Although the *per MSG* processing does not itself 
involve combining data from location areas associated 
with different MSGs, the adjacent location areas list 36 
for each location area associated with a particular loca- 
tion area should be complete after the 'per MSG' 
processing phase. The lists 36 can therefore be output 



to identify the adjacent location areas for each location 
area of an MSG. 

The third processing phase involves the consolida- 
tion of the lists 34, 35 and 36 collected for all MSGs in 

5 the overall system. This consolidation involves forming 
a list 37 of MSGs. each entry corresponding to a respec- 
tive one of the MSG items 33 and including a pointer to 
the location area list 34 relevant to the MSG concerned. 
From the consolidated system-wide location area 

10 infonnation contained in the lists 34 to 37. it is possible 
to ascertain which location areas are most utilised by 
adding the "hits" counts for the cells of each location 
area and identifying the location areas with the highest 
"hits" counts. 

75 Using the information contained in the lists 34 to 37, 
it also possible to carry out various consistency checks. 
For example, it is possible to arrange for the workstation 
42 to check that no cell appears in more than one list 35 
(a cell should only be associated with one location area); 

so if this check shows that a cell occurs in more than one 
list 35. then an alarm is generated. The workstation 42 
may also be arranged to check that no location area is 
associated vinth more than one MSG as would be the 
case if it contained cells associated with more than one 

25 MSG; again, detection of an anomdy can be arranged 
to generate an alarm. 

Various modifications are, of course, possible to the 
above described monitoring method for deriving loca- 
tion-area related information. Additionally, the monitor- 

30 ing method can be applied to any appropriate cellular 
radio system and is not restricted in application to GSM- 
type systems. 

Claims 

35 

1 . A monitoring method for a cellular mobile radio sys- 
tem that comprses a fixed part providing radio cov- 
erage in a plurality of ceils logically grouped into 
location areas, and mobile stations for communicat- 
ee ing with said fixed part of the system, each mobile 
station being operative to pass location update mes- 
sages to said fixed part at least upon changing loca- 
tion areas; said method involving: 

45 " monitoring said location update messages to 

extract location-area related data from each of 
at least some of said messages, 
- combining said location-area related data 
extracted from a plurality of said location update 

so messages to produce location-area related 

information, and 

~ oulputting said location-area related informa- 
tion, 

55 2. A monitoring method according to daim 1 . wherein 
said location-area related data extracted from a said 
location update message comprises the current cell 
and location area of the said mobile station that sent 
the message, said location-area related information 
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being the identification of the cells making up a said ated with the interface on which the message 

location area. was monitored; 

» checking that no said location area is assod- 
3. A monitoring method according to claim 1 . wherein ated with more than one MSG. 

said location-area related data extracted from a said s 
location update message comprises the old and new 
location areas of the said mobile station that has 
sent said message upon changing location areas, 
said location-area related information being the 
identification of which location areas are adjacent io 
each other. 



4. A monitoring method according to claim 1 . wherein 
said location-area related data extracted from a said 
location update message comprises the current is 
location area of the said mobile station that sent the 
message, said method involving maintaining a count 

of such messages for each location area on which 
data is extracted, and said location-area related 
information being the identification of which location so 
areas are responsible for the most location update 
messages. 

5. A nruiniloring method according to claim 1 , wherein 
said location-area related data extracted from a said 2S 
location update message comprises the cun-ent cell 
and location area of the said mobile station that sent 
the message, said method involving maintaining a 
count of such messages for each cell of a said loca- 
tion area, and said location-area related information 3o 
being the identification of the celts in that location 
area that constitute the primary gateway cells for 
entry to the location area. 

6. A monitoring method according to claim 1 , wherein 35 
said location update messages are monitored 
across said system to extract for each monitored 
message the current cell and location area of the 
mobile station that sent the message, a check then 
being made that no cell is associated with more than 40 
one location area. 



7. A monitoring method according to claim 1 , wherein 
said mobile radio system is a GSM-type system and 
said location update messages are monitored on at 45 
least one 'A* interface between a Base Station Sub- 
system BSS and a Mobile Switching Center MSG. 



8. A monitoring method according to claim 7, wherein 
said location update messages are monitored so 
across said system on the 'A* interfaces associated 
with all MSCs, said method including: 

determining from said location update mes- 
sages monitored on said *A' interfaces, the cur- ss 
rent location area of the mobile station that sent 
the message; 

~ associating the location area determined for 
each monitored message with the MSG associ- 
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